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Abstract. We show that there is significant cancellation in certain 
exponential sums over small multiplicative subgroups of finite fields, 
giving an exposition of the arguments by Bourgain and Chang 6 . 



1. Introduction 

Let ip : F p — > C be any non-trivial additive character in ¥ p (that is, 
ip(x) = exp ( 27r "^ ^ for all x G ¥ p , for some £ G F* ), and let H be a subset 
of F p . We are interested in obtaining good upper bounds for 

that is, significantly smaller than \H\. A traditional analytic number theory 
approach when H is the multiplicative subgroup of F p of index m is to 
"complete the sum": We have 



1 

m 



X (mod p) 
X m =X0 



1 if n € H, 
otherwise; 



where the sum runs through the Dirichlet characters (mod p) with order 
dividing m. Therefore 



neFp 



X- 

x m =xo 



m 



X- n£F„ 

x m =xo p 



The last sum, Yl n e¥ p V'( n )x( n )> is a Gauss sum when % / Xo an d is known 
to have absolute value ^fp\ and Ylne¥ p V'( n )Xo( n ) = — 1- We deduce that 

Y il>(x) < VP- 

x€H 

This is non-trivial when H has substantially more than p 1 / 2 elements and 
classical arguments can sometimes give non-trivial bounds for interesting 
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sets H as small as p 1//4 , but not much smaller. For H a multiplicative 
subgroup, the first bound of the form SzeH^( x ) ^-S P~ S \H\ with 5 > 
and for \H\ significantly smaller than p 1 ^ 2 was obtained when \H\ 3> e p 3 / 7 + e 
(for all e > 0) by Shparlinski [14] . and later refined to 3> e p 3 / 8 + e by 
Konyagin and Shparlinski (unpublished), for \H\ 3> e p 1 / 3+e by Heath-Brown 
and Konyagin [12], and for 3> e p 1 /^ 6 by Konyagin |13j . An essential 
ingredient in these results are upper bounds on the number of F p -points on 
certain curves/ varieties that significantly go beyond what the Weil bounds 
give. 

In several recent articles Bourgain along with Chang, Glibichuk, and, 
Konyagin showed how to get non-trivial upper bounds for various inter- 
esting H that are much smaller, using completely different methods — the 
techniques of additive combinatorics. The aim of this note is to give an expo- 
sition of these ideas in the simplest cas^ll by showing that there is significant 
cancellation in such exponential sums over small multiplicative subgroups 
H of the finite field F p . 

Theorem 1.1. Given a > 0, there exists [3 = (3{a) > such that if \H\ > 
p a , and H is a multiplicative subgroup of¥ p , then 

(1) ]T#r)«^|#|. 

xeH 

A proof of this result was first sketched by Bourgain and Konyagin in 
[10] . and detailed proofs were subsequently given by Bourgain, Glibichuk, 
and Konyagin in [8j. This note is based on the arguments by Bourgain and 
Chang in [B] , and is a somewhat streamlined version of notes from a lecture 
series given at KTH. 

However, as alluded to above, the idea of using additive combinatorics is 
very versatile. For instance, in [U [2] Bourgain showed that under certain 
circumstances it is enough to assume that H has a small multiplicative dou- 
bling set, i.e., that \H ■ H\ < \H\ l+T for r > small. In particular, one can 
take H = {g 1 : t$ <t < t\} as long as the multiplicative order of g modulo 
p and t\ — to are not too small, and thus it is also possible to non-trivially 
bound incomplete exponential sums over small (as well as large) multiplica- 
tive subgroups. Further, by suitably generalizing the sum-product theorem 
to subsets of F p x F p (some care is required since there are subsets of F p x F p , 
e.g., any line passing through (0,0), that violate a naive generalization of 
the sum-product theorem), Bourgain showed that there is considerable can- 
cellation in sums of the form ^ Sl=1 | J2 S2 =i ^( a 9 S1 + bg slS2 )\ (consequently 
proving equidistribution for so-called Diffie-Hellman triples in F 3 ) and in 
[HE] he obtained bounds for Mordell type exponential sums X^=i VK/^))) 
where f(x) = Ya=i <HE is a sparse polynomial (under suitable conditions 
on the /cj's.) Moreover, in [7J [6] Bourgain and Chang obtained bounds on 



See Section [5] for an easy extension to the case of incomplete sums. 
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sums over multiplicative subgroups (and "almost subgroups" ) of general fi- 
nite fields F p n, respectively TLjqL where q is allowed to be composite, but 
with a bounded number of prime divisors. 

f .f . A brief outline of the argument. Define an //-invariant probability 
measure fiH on ¥ p by 

jl/\H\ iixeH, 

Hh\x) '■= \ 

I otherwise, 

and assume that ([I]) is violated, i.e., that there exists £ E F* for which 

(2) = £ l J 'H(x)exp 

xeVp 

Let v = hh * hh~, where ^h~{x) = hh(—%), and let be the A>fold 
convolution of v. Using (|2|), it is possible to show (see Proposition 14. 4p that 
for some tiny r\ and k sufficiently large, 

(3) £ \m)\ 2 \MxO\ 2 vk(x) > P - Wv £ \M0\ 2 , 

and that the support of z?/% is essentially contained in the set of "large 
Fourier coefficients" Ag (cf. Proposition 14.21 ) Now, being essentially 
supported on Ag means that and z?2fc are "similar" (note that z?2fc(£) = 
^fc(£) 2 > an d ^k(0 > f° r an £)i hence and V2k = v k * v k are a l s ° sim- 
ilar, and this might be seen as a form of statistical, or approximate, ad- 
ditive invariance for the measure v^. Further, by Parseval, Q says that 
Y.x, y e¥ p v 2k{y)v2k{x~ x y)v k {x) > P~ 10v Y.xeF p v k( x ) 2 i wnich we may inter- 
pret as X^gF u 2k(y) l '2k( x y) being correlated with and this in turn 
might be seen as statistical multiplicative invariance. (Also see Remarks [3] 
and|4j) With S\ being the set of points assigned large relative mass (i.e., 
those x for which Vk{x) is close to ||^fc||oo) as a starting point, these invari- 
ance properties can then be used to find a subset of Si with both small 
sum and product sets. More precisely, using ([3]), together with the Balog- 
Gowers-Szemeredi theorem (cf. Theorem I2.2f) in multiplicative form, we can 
find a fairly large subset S3 C Si with a small product set. Using the Balog- 
Gowers-Szemeredi theorem again, but in additive form, we then find a large 
subset S4 C S3 which has a small sum set. Now, since S4 C S3, S4 also 
has a small product set, hence it contradicts the sum-product theorem (cf. 
Theorem 12.11 ) 

Acknowledgment: It is my pleasure to thank John B. Friedlander and 
Andrew Granville for their encouragement, as well as many helpful com- 
ments and suggestions. I am also grateful to University of Toronto for its 
hospitality during my visit in April 2007, during which parts of this note 
were written up. 
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2. Some additive combinatorics results 

We will need two essential ingredients from additive combinatorics. First 
we recall the sum-product theorem for subsets of F p , due to Bourgain, Katz 
and Tao [9] (for an expository note, see 

Theorem 2.1. For any e > there exists 5 = 5(e) such that the following 
holds: If A C F p is a subset for which p e < \A\ < p 1 ^ 6 then 

\A + A\ + \A- A\ > \A\ 1+S . 

We will also need the following version of the Balog-Gowers-Szemeredi 
theorem (this version of Theorem BGS' in [6] is an immediate consequence 
of Theorem 5 in Balog's article herein [I]): 

Theorem 2.2. Let A and B be finite subsets of an additive abelian group, 
Z, and G be a subset of A x B, and let S = {a + b : (a,b) £ G}. If 
\A\,\B\,\S\ < N and \G\ > aN 2 then there is an A' C A such that 

2 37 a 4 
(4) i)\ A ' + A'\<-^N, n)\A'\>-^N. 

3. The main technical result 

In this section we prove the key technical result (cf. [6], Proposition 2.1.): 

Proposition 3.1. Let [i be a probability measure on ¥ p . If there exists a 
constant A G (0, 5] such that 



(5) E \m)\ 2 \HvO\ 2 Ky) > a e l^)l 2 , 



and 

(6) mo), E^) 2<A / 4 



then there exist a subset S C F p such that 

a 254 o 

(7) zmP<\ S \ El^)l 2 < K P 5 

?6F P 

and 

o2729 

\s + s\ + \s-s\ < 



To prove Proposition 13.11 we will construct a sequence of subsets F p D 
Si D ^2 D S3 D S4 such that = A ^ 1 ), where ^3 has a small 

product set and S4 has a small sum set. 

First let us recall some useful properties of the finite Fourier transform. 
For a given probability measure \i on ¥ p define its Fourier transform to be 

HO '■= E M^OVK^), 
xe¥ p 
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so that = /!(—£). With this normalization, Parseval's formula reads as 

p E i^)i 2 = E i^)i 2 - 

As /x is a probability measure, we see that 

<j){x) :=p(n* n~)(x) = l£(OlV(a£) 

is > for all x. We will replace the middle term in ([7]) by |5|0(O). Moreover, 

E = p> 

since /z* /i~ is also a probability measure. Prom the Fourier expansion of <f>, 
we have 

(8) max (f>(x) = (f)(0) = p- (^*//~)(0) = pY^ p(x) 2 < Ap/4 

x 

by ©. 

3.1. Multiplicative stability. We obtain the following form of "statistical 
multiplicative stability" . 

Lemma 3.2. // ([5]) and ([6]) hold then 

(9) J2 E <f>(*M*vMv) > \ Ap^(O) 

x& p yeF x 

Proof. For y fixed, we have 

J>(*)#ry) = E l^)| 2 |^)| 2 E^(^+xyO=pEl^)| 2 |^-^)| 2 - 

xSF p 5,reF p xeFp ££Fp 

Summing this over all y £ F* , we see that the left hand side of © equals 

p E \MO\ 2 \H-yO\ 2 Ky)-P^\m)\ 2 \m\ 2 m 

y,5eFp 5eF p 

> p A £ |/2(0| 2 -P(A/4)|/I(0)| 2 £ \MC)\ 2 

£eFp ^eFp 

by © and (jBJ), as |ju(— j/^) | 2 = |/2(y£)| 2 , which yields the result since |/x(0)| 2 < 
1. □ 

Remark 1. Note that E^eFp <P( x )(p(xy)Ky) < 0(0) E^eFp <t>{ x )Kv) < 

p</>(0). In our applications, we shall take A = £>~ e , and /or £/iis choice of A, 
the lower bound Q is fairly good. 

As a starting point for a multiplicatively stable subset, we use the points 
which are assigned large measure by // * . 
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Lemma 3.3. // (|5]) and ([6]) hold and 

Si := {x E F p : <f>{x) > Ja</>(0)} 

o 

(10) ^ <t>{x)4>{xy)ii{y) > \ Ap0(O) 

xyeSi 

Proof. We have 

£ 2 £ - £ - £ ■ 

xy&Si xygSi 

By ([9]), the first term on the right hand side is > (3/4)Ap</>(0). The second 
term 

E 4>(x)4>(xy)ii(y) 
xEW p \Si,y&$ 

is, since (j)(x) < A</>(0)/8 for x £ Si, bounded by 

*m E , (I9M9) <^ E „ WE , (X9) <^!> 

xeF p \5i,j/eF p x j/eF* ^gF p 

since X^eF (j>(xy) = p for y / and ju is a probability measure. Similarly, 
the third term is bounded by Ap0(O)/8, hence the left hand side of (jlOD is 
> Ap0(O)(3/4 - 1/8 - 1/8) > Ap<£(0)/2. □ 

We proceed to estimate the size of S%. 

Lemma 3.4. If ([5]) and ([6]) hold then 

20(0) < < A^y 

Moreover, if we let 

S 2 :=Si\{0} CF*, 

i/ien |5 2 | > |5i|/2. 

Proof. For the lower bound, note that 



(12) |5i| = ^ |5i|M(y) > E l^ny-^iKy) = E M 

xy€Si 

1 ^ Ap 



> 



0(o)2 E ^)^Hy)> 20(o) 

xy€S! 
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by (PUD, which is > 2 by ©, so that \S 2 \ > |Si|/2. For the upper bound, 
note that 

|Sll< ^I? W£ 45)J> ( ^AM' 

□ 

To show that there are many y such that \S% H j/ — 1 ^2 1 is fairly large, we 
begin by giving a lower bound on the expected size of the intersection. 

Lemma 3.5. // © and ([6]) hold then 

Proo/. Since n y _1 S 2 = (5i n y~ 1 5i)\{0} for all 1/ 6 F p x we have 

2 l^ny-^Ky)^ E l^iny-^iKy)- £ Mi/) 

j/GF* yGF* yGF* 

_ 1 > Ap 



20(0) " 40(0) 
by the right hand side of (fT2|) and as X^eFj, = 1> an d then by 



□ 



In the next result we show that there are many y for which 1 52 Pi y S2 \ 
is large: 

Lemma 3.6. // © and © hold and 

(14) T -{» EF MW*I>8S)} 
i/ien 

A 5 , 
2 1 

Proof. 

\SMT) = \S 2 \J2 riv) > E l^ 2 n iT^IMv) 



as) m>^i 



yGT j/GT 



(16) = E l^ny-^lMy)- E |,S2n ^ l52l/x(y) -^) >^ 152 



by (|13p and from the definition of T, and then by (jlip and the trivial bound 
|5 2 | < |5i|, so that n(T) > A 2 /64. 

On the other hand, by Cauchy- Schwartz and Parseval's identity, 

1/2 



MT) < \T\ 1/2 fEM-) 2 ) 

VrGT / 
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< m 1/2 [\ E \mf 



1/2 



i0(o) v 



so that |T| > pA 4 /(2 12 0(O)) > (A 5 /2 15 )|Si|, by (HI]). □ 
Thus, by shrinking T if necessary, we have found a set T such that 
(A 5 /2 15 )|S 2 | < \T\ < \S 2 \ 
with the property that for all y £ T, 

An A 2 A 2 

(17) \ s ^y^\>^k>^\ s ^^\ 

by (UU). 

Let G := {(x,y) : x G S 2 ,y G T,xy E5 2 }cS 2 xTcF p x x F*. By (TTTD, 
the number of x such that (x,y) G G is at least 2 _6 A 2 |S2| for each y G T. 
Therefore, since |T| > 2~ 15 A 5 |S2|, we find that 

|G| > 2~ 6 A 2 |S 2 | • 2- 15 A 5 |S , 2 | = (A/8) 7 |S 2 | 2 . 

By the definition of G we know that 

{st : (s,t) G G} C S 2 ; 

so, with g a primitive root modulo p and defining log gp (s) to be the smallest 
integer m > such that g m = s mod p, and by taking A = {log g p s : s G 
S 2 }, B = {log 9iP t : t G T} with JV = \S 2 \ and a = (A/8) 7 in TheoremES 
we obtain a subset A' of ^4, with \A'\ > (A 28 /2 99 )|yl|, for which 

\A' + A'\ < (2 205 /A 56 )A r < (2 304 /A 84 )|,4'|. 
Therefore S3 = {g a : a G A'} is a subset of S2 for which 

(18) |S 3 | > (A 28 /2 100 )|Si|, 
by Lemma 13.41 and 

|S3-S 3 |<(2 304 /A 84 )|S 3 |. 

3.2. Additive stability. We finish the proof of Proposition 13. II by finding 
a subset S4 of S3 with a small sum set. We first show that S3 exhibits 
"statistical additive stability"; to do this we only need to use that S3 C Si, 
together with the definition of Si. 

Lemma 3.7. // ([5]) and (J6]) hold then 

(19) Hxi-x 2 )>2- 6 A 2 4>(0)\S 3 \ 2 

Proof. Recalling that <p{x) = p(fi * fi~)(x), we find, using the Cauchy- 
Schwarz inequality, that 

P x£S 3 J \y&p xeS 3 / ye¥ p y e¥ p \xes 3 
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= ~~T ^ ^2 ^(x 1 + y)fi(x 2 + y) = <f>(xi-x 2 ). 

Now Ylx&S3 ^( x ) ^ T^WI^I' srnce $3 C 5*i, and the lemma follows. □ 

To obtain an additively stable subset we will, as before, use Theorem 1 2, 21 
First, let 

(20) S := {x G F p : </>(x) > 2~ 7 A 2 0(O)} 
Then 

by (HU and then (fig]) . 

Using So, S3 we can now define a fairly large graph G". 

Lemma 3.8. // © and ([6]) then 

G' := {(x l7 -x 2 ) G S3 x (-S 3 ) : X! - x 2 G S } C S 3 x (-S 3 ). 

/ias ai Zeast 2" 7 A 2 1 ^3 1 2 elements. 

Proof. We have 

\G'\ ■ 0(0) > Y, ^ ~ x 2) 
{x 1 -x 2 )eG' 

= Y <?K X 1 ~ x 2) ~ Yj ~ X ^ 

xi,x2es 3 (xi,-x 2 )es 3 x{-s 3 )\G' 

> 2- 6 A 2 0(O)|5 , 3 | 2 - 2~ 7 A 2 0(O)|S 3 | 2 
by (US]) and pUjh and the result follows. □ 

Since {x± — x 2 ■ (x\,— x 2 ) G G"} C So we can apply Theorem 12.21 with 
A = S 3 , B = -S 3 , G = G', N = (2 108 /A 31 )|S 3 | and a = A 64 /2 223 to 
obtain a subset S4 C S3 with 

^256 ^225 

(21) \Si\ > -TpoyN = ^9^|S 3 | 
for which 

21821 2 1929 2 2728 

|S 4 + S 4 | < ^512^ = ^543 l^l < A768 I 54 '" 
Moreover, since S4 C S3, we find that 

|S 4 • S 4 | < |S 3 • S 3 | < (2 304 /A 84 )|S 3 | < (2 1103 /A 309 )|S 4 |. 
Finally, by (fXl) , then (|2"T]). (fTS)) . and Lemma E31 we have 

8p A 225 . A 253 A 254 p 

> \Sl\ > |S 4 | > ^t55-|S 3 | > -^oqo-pil > 



A0(O) " 2 799 1 61 2 899 1 11 2 900 0(0)' 

Taking S = S4 we have found a set with the desired properties. 
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4. Proof of Theorem 11.11 

4.1. Preliminaries. Let /i be a given probability measure on ¥ p . Recall 
that the Fourier transform of fj, was defined to be ju(£) := Ylx£F p M^V'O 3 ^)) 
and hence jEt(£) = £). With this normalization, Parseval's formula reads 
as p^agF IM X )I 2 = S^gFp Ia*(OI 2 - Moreover, if v is another probability 
measure then 

E m Wx) = E = E = E flOKO 

xeF p £gf p ie¥ p iew p 

Let v := fi*fi~, that is i/(x) = Ysy,z:y-z=x A t (y)/ / (- 2 )> so that a;) = v(x) 
and z?(x) = |/2(x)| 2 . If v\. is the fc-fold convolution of u, that is 

Vk(x) ■= E v (yi) v {yi)--- v (yk), 

then = |j£t(x)| 2fc > 0. Notice that v{x) = J2 y z . y _ z=x fj,(y)fj,(z) < 

max 2 fi(z) ^2 y /J,(y) = max 2 fi(z) for all x; and similarly 

(22) maxi/fc(x) < max/i(z) for all k. 

X z 

We have 

IKIIi= E IM*)I 2 = VI#I- 

xGFp 

Note that fin(hx) = /j,h(x) for all h e H, and so ftnihx) = J2h(x) for all 
h £ H, and Vk{hx) = Vk{ x ) for all /i G if and A; > 1. 

4.2. The set of large Fourier coefficients. Given 5 > 0, let 

A 5 :={£eF p : > jT 5 } 

be the set of "large" Fourier coefficients of fi. 
Lemma 4.1. Suppose that \i = [in- We have 

\A S \ < P 1+25 /\H\. 
Also if \^h(.0\ > P~ S f or some nonzero £ G F* , then 

|Aa| > |#|. 
Proof. For any measure /z on F p we have 

|a,i < P 25 E \m\ 2 < P 2S E i£(6i 2 =p 1+25 E i^)i 2 < 

f6A a 5eF p xeF p 

and the first result follows since this last sum equals l/|i?| for [i = fj-n- For 
the second result note that if £ G then = > P _<5 f° r an 

he H, so that /i£ G A5 for all he H. □ 

We will now show that it is possible to find k, S so that the support of 
is, in L 2 -sense, essentially given by A5. 
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Proposition 4.2. For any measure fi on ¥„, where p > 3, and any r/ > 

5/(p 3 logp), there exists an integer k > 4 and 

6G(0, V /k 2 ) 

such that 

(23) p- r '\As\< Y,\^(0\ 2 <P v \^s\ 
and, in particular, 

(24) ^|^(0| 2 <P 2,7 E^^| 2 - 

£eF p teAs 

Proof. For any k 6 N we have 
(25) 

Ei^)i 2= E i^(oi 2 + E i^(oi 2 <iA 1A i+^- l/fc ) 4fc = iA 1/fc i+i/p 3 

£GF P £eA 1/fc ££A 1/fc 

since each Vk{Q < 1- 

We define a sequence of integers /co = 4 < /ci < . . . where fcj+i = [kf /rj\ + l 
for each i > 0, and let 5, = 1/fci+i for each i. Note that kf/rj< ki + \ = 1/di 
so that /cj5j < rj/ki < r//4. Since ^(C) = \V-H{€)\ 2ki , we have 

^ |%(£)| 2 >|A 5 J.p- 4 ^>|A 5i |.p-'. 

«£A 5 . 

We note that the lower bound in (|23p follows from this, as well as (|24p . once 
we establish the upper bound in (f23j) . 

Now, there exists an integer i £ [0, M], where M = 2([l/ry] + 1), such that 
E^Fj^OP^IA^Jelse 

P"|Ai/ fci+1 | =^|A 5i | < £ |%(£)| 2 < |A 1/fe J + l/p 3 < |A 1/fe J(l + 1/p 3 ) 

?eF p 

for each i, by ([25]) . and so 

|A 1/fc J <p- M ^\A 1/k0 \(l+l/ P 3 ) M <p l - M "(l+l/p 3 ) M <p-\l+l/p 3 ) M < 1 

since M < ^p 3 logp, which is untrue (as € Ay^ for all € N). 

We select k = ki and 5 = 5^. □ 

Remark 2. Note that the proof gives us k <C exp(exp(0(l/ry))). 

Remark 3. Since the support of v\~ is essentially given by As, it is easy 
to see that the same holds for V2k'j we ma U interpret this as v\~ * v\~ being 
"similar" to and hence that Uk is "approximately additively stable". 

In the following key Lemma, the .ff-invariance of and hence of is 
essential. 
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Lemma 4.3. For \i = and all £ E ¥ p , we have 

m) 4k < E ^(xo 2 Mx) 

Proof. The case £ = is immediate, hence we may assume that £ ^ 0. Now, 
since = %(£) for all h € H, we have 

^fc(£) 2 = E "k(x0 2 VH(x) = E ^ki-xC^mix), 

by Parseval's formula. Now note that if /x is any probability measure and 
I > 1, then fi(x)f(x) < (Ylx / u ( x )l/( x )l') 1 ^- Therefore the above gives 

£ fc (0 4fc < E ^(-zr^iMaor = E ^(-xr 1 )^^) 

xe¥ p xg¥ p 

since |/I//(x)| 2fc = v(x) k = and, applying Parseval one more time, we 

obtain 

v k (0 4k < E M-xi?y k {-x) = E "k(x0 2 Mx) 

□ 

We consequently obtain: 
Proposition 4.4. With k,r] as in Proposition ^, we have 

p~ 10v E ^ E E M0 2 vk(xa) 2 Mx) 

Proof. By Proposition 14.2^ we have 

p~ 2ri E ^) 2 ^ E ^ ^ E d ^) Ak+2 ^ p 8v E ^) 4fc+2 

?GFp £eA, £GA 5 ?GFp 

which, by Lemma \4.3\ is 

</"E E M0 2 vkH) 2 v k (x). 

CGFp xGFp 

□ 

Remark 4. Since £%(a;£) < 1 and is a probability measure, we find that 
J2( x£¥ p ^k{C) 2 ^k{x^) 2 Vk(x) < ^gGFp^fc(^) 2 ' s0 ^ e ^ ou;er bound on the dou- 
ble sum in Proposition \4-4\ ^ quite good. Further, using Parseval on the two 
sums over £ (ignoring the term x = 0) we find that ^2 y£ ^ p V2k(y) u 2k(yx 
which we can interpret as a multiplicative translate of v^k with itself, is 
highly correlated with v^ix). Thus, the Proposition might be interpreted as a 
statement of "approximate multiplicative stability" of ' v\~. (Since the essen- 
tial support of is given by A$, the same holds for i>2k> so * n some sense 
Vf. and are "similar".) 
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To go from statistical additive/multiplicative stability to a subset that 
contradicts the sum-product Theorem, we will apply Proposition 13.11 with 
fj, = Vk and A = p~ 10r > (and note that ([22]) implies ([6]) provided 1/\H\ < 
A/4), and select 5 and k as in Proposition 14.21 Assume that I > P & 

for some £ G F* . We thus obtain a set 5 such that 

15 + 51 + 15-51 < 2 272 y 680 "|S|. 

Note that 

P~ V \H\ < P - V \A 5 \ < \m)\ 2 <P v \As\<P 1+v+2S /\H\ 

by ([23]) and Lemma EL"Tl so that gives, as 25 < 77, 

1 \H\ pi+n»? 

2900 p2542r? < Pi < ^ . 

Now select 77 = min{a/6000, 5(a/2)/8000}, so that the sum-product Theo- 
rem [2+] is violated with e = a/2 for p sufficiently large, and thus |/2if (£)| < 
p~ s for all £ G F* . The Theorem follows with /3 = <J> exp(— exp(C/ri)) for 
some constant C > 0. 

5. Incomplete sums 

The proof of Theorem 11.11 can fairly easily be extended to incomplete 
sums over multiplicative subgroups. 

Theorem 5.1. Let g G F* have multiplicative order at least T, and let 
H = {g 1 : <t <T}. If \H\ = T > p a , then 

V] ip(x) <C p~ p \H\ 

Define /j>h, v^, A5 etc as before. To obtain a contradiction, we will 
assume that |/2ff(£o)| > 2p _<5 for some £0 £ F* . 

We begin by showing that A<5, the set of large Fourier coefficients, is 
almost of size \H\, and that fx is quite large on As ■ H\ for a fairly large 
subset H\ C H. 

Lemma 5.2. Let 

Hi :={<?': < t < \H\p- 5 /4}. 
If |#(£o)| > 2 P _<5 f or some £ S Fp , i/ien 

|A«| > \Hi\ 
Moreover, if £ £ As and h G Hi , then 

\^h(K)\ > |? H (0l/2. 
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Proof. For / £ Z such that < Z < T, we have 

fiii(g l O = E ^9 1 &)hh{x) = E 4>(£ x )t J 'H{g~ l x) = rm E 



4 (e^)+ 2 ^) 

1 W# / 



\H\ 

for some such that \9\ < 1. Thus, if Z < |i?|p _<5 /4, then 

(26) IM^0I>IM0I-p~V2. 

In particular, if ft £ JEZi, then |£h(7i£o)| > l£ff(£o)|-P - V 2 > 2p~ 5 -p~ 5 /2 > 
p~ s and hence |A^| > \H%\. Finally, if £ £ As then > P _<5 ; so the 

second assertion follows from (I26p . □ 

Lemma 5.3. If £ £ As, then 

Proo/. If £ £ A 5 , then |£ff(ffr)| > liMOl/ 2 for all h £ fl^ Hence 

= 2 4fc +v e Vkm 2 » H (x) 



since |F|/|i?i| < 8p d . Thus, if £ £ A 5 , then 

mr < 2 8 * 2 +v w f e WW)) < 2 8fc2 + 6 y fc5 e w) 2 ^) 

\xeF p ) x& p 

by the same argument used in the proof of Lemma 14.31 □ 
Proposition 5.4. For p sufficiently large, 

Proof. Arguing as in the proof of Proposition 14.41 find that 

P - 2ri E ^ E ^) 2 * p 8k2s E ^) 4fc+2 ^ ^ E ^) 4fe+2 

which, by Lemma 15.31 is 

< P ^2 8k2+ek e e^(0 2 %(^) 2 ^(^)<p 9j? E Mo 2 m*) 2 n(x) 

□ 

The rest of the proof is now essentially the same as the proof of Theo- 
rem [TTT1 
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